Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
File:                     Y11bZE4i-0iOTWwAErCqvyOOYeU.mft (raw, json)
Hash identifier:          0J2QQAZ+I/5Z3YOj7og/84TRtQ5mAEKRvazy/YFtlmI=
Subject key identifier:   98:9C:DD:BA:D6:A4:E3:AD:14:6B:59:D4:A2:61:83:73:E8:EC:0F:D5
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Certificate issuer:       /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial:       01962ECF9A1C89A3730121BD061CC6D2B75B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
Manifest number:          0560
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: UfQPCCjVZ9who8V_2ydTobai7pY.roa (hash: IBJI/ZiBDqZiCgT1tzzy136SyaAPb6KafOn0fl7ud1w=)
                          2: Y11bZE4i-0iOTWwAErCqvyOOYeU.crl (hash: 7qIRXGz0mYaXAdjFDcmbr+jSmKroWZu6sb+44KkaakM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:9a:1c:89:a3:73:01:21:bd:06:1c:c6:d2:b7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=989cddbad6a4e3ad146b59d4a2618373e8ec0fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:55:f8:ae:66:fa:16:ff:7d:4e:23:ad:bc:
                    fd:59:9d:8f:df:4b:a5:5d:54:71:31:03:ba:05:c2:
                    38:07:d5:24:85:d1:7c:21:cd:8b:ee:a5:a2:c6:af:
                    b7:17:4f:1b:7c:8c:21:24:1b:6d:84:48:32:18:35:
                    42:aa:ae:b5:d7:7c:cd:46:5c:f8:f4:b3:87:50:8a:
                    e6:b4:c5:0d:87:56:8e:d2:d3:8b:8c:ef:95:59:9b:
                    6f:fd:81:1e:15:c4:e4:1a:b9:92:24:66:bd:67:1d:
                    76:3a:ef:f2:da:fb:c0:17:93:fc:5d:6a:ef:7e:ca:
                    6e:7d:52:84:4e:86:45:8b:d7:16:7b:26:f5:95:a8:
                    3a:5b:b4:70:03:09:b9:25:4c:66:e9:d1:73:d8:f2:
                    fa:b2:b8:b8:f1:6b:19:8d:18:aa:64:9b:c2:dd:19:
                    76:ef:cc:9f:f6:86:13:97:3f:6b:8b:0b:38:4f:d6:
                    7d:99:cb:36:9a:9f:de:39:a9:bb:4e:b9:58:c9:54:
                    59:3a:f4:34:4d:99:8e:b2:7a:99:93:6f:d7:62:d1:
                    2c:34:7c:3c:72:2a:0c:2b:35:b5:8c:a8:a6:6e:cb:
                    c8:27:3f:65:83:12:63:22:79:96:75:45:77:fc:6f:
                    8f:75:34:f8:2b:16:83:74:2a:13:30:e7:46:34:bf:
                    da:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9C:DD:BA:D6:A4:E3:AD:14:6B:59:D4:A2:61:83:73:E8:EC:0F:D5
            X509v3 Authority Key Identifier:
                keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:af:50:91:b7:7b:ff:d0:91:71:ce:fc:6d:51:f5:ae:10:
         4b:b1:7e:84:3e:0f:24:ba:fb:82:c4:d3:d3:9c:d3:c9:25:8b:
         47:a8:60:4f:5b:4b:0c:3a:74:86:c8:17:e5:80:8d:e2:62:b9:
         57:05:5f:fc:96:11:ca:68:21:9f:6b:c7:c9:e4:8e:34:2b:53:
         49:e8:54:c9:9c:66:39:78:9d:47:77:fe:4d:c4:fa:89:f4:60:
         4d:2c:3c:1c:bb:77:3a:36:fe:37:bf:4a:ff:22:2a:08:ad:21:
         6a:b7:77:c0:24:97:2c:83:fb:3d:8c:79:36:72:ab:6a:ad:5b:
         6e:58:09:02:ca:54:e2:0c:ba:a3:cd:b2:e8:76:2a:f2:5f:00:
         a6:c6:7f:95:46:85:6d:20:eb:fb:4e:8c:83:ad:c4:9f:79:47:
         96:4f:5b:4b:18:d6:06:85:74:4f:15:c6:38:de:04:89:b2:2b:
         8e:5b:c4:e6:b6:64:44:57:d0:c9:bc:5c:f6:a7:73:1d:1a:d6:
         98:f8:36:77:97:56:ba:21:da:fb:a7:e3:fa:a7:97:dd:7f:51:
         92:b9:3c:7e:65:19:54:23:29:e7:c9:ab:2e:4d:05:a8:11:98:
         47:39:ec:9e:99:d9:11:e9:dc:c9:f3:4a:55:09:ad:12:3a:db:
         a8:b8:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----